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1 Deploying the Squid Proxy Server on Linux 

Ian Spare 

March 2001 Linux Journal 

Full text available: jg[ htmlf24.89 KB) Additional Information: full citation , abstract , references , index terms 

Ian gives an example of the installation, configuration and maintenance of this multi- 
tentacled invertebrate proxy, server. 

2 Proxy signatures for deleoatina sianino operation 
Masahiro Mambo, Keisuke Usuda, Eiji Okamoto 

January 1996 Proceedings of the 3rd ACM conference on Computer and 
communications security 

Full text available: 
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full citation , abstract, references , index terms 

This paper describes an approach to managing tasks and processes that are distributed 
across a large number of people. The basic idea is to use a social visualization called a task 
proxy to create a shared awareness amongst the participants in a task or process. The 
process awareness provided by the task proxy enables its users to monitor the task state, 
the states of participants, and to communicate with those in particular states. We describe 
the concept, a first prototype, Its evaluation, and ... 

Keywords: CSCW, awareness, design, process awareness, social computing, social proxy, 
task support, visualization, workflow 



Are handheld viruses a significant threat? 
Simon N. Foley, Robert Dumigan 

January 2001 Communications of the ACM, volume 44 issue i 

Full text available: g^gmg^ Additional Information: full citation, references. Index terms 



6 A high-availability high-performance e-mail cluster 
Wyman Miles 

November 2002 Proceedings of the 30th annual ACM SIGUCCS conference on User 
services 

Full text available: ^pdf(175.10 KB) Additional Information: full citation , index terms 



Keywords: anti-spam, anti-virus, cluster, electronic mail, fallover, high-availability, high- 
performance, mail routing, proxy, redundancy 

7 Internet WORMS: past, present, and future: A taxonomy of computer worms Q 
Nicholas Weaver, Vern Paxson, Stuart Staniford, Robert Cunningham 
October 2003 Proceedings of the 2003 ACM workshop on Rapid Maicode 

Full text available: ^ pdf(136.01 KB) Additional Information: full citation , abstract , references , index terms . 

To understand the threat posed by computer worms, it is necessary to understand the 
classes of worms, the attackers who may employ them, and the potential payloads. This 
paper describes a preliminary taxonomy based on worm target discovery and selection 
strategies, worm carrier mechanisms, worm activation, possible payloads, and plausible 
attackers who would employ a worm. 

Kiey words: attackers, computer worms, mobile malicious code, motivation, taxonomy 



8 Access Control Models and Mechanisms: Partial outsourcing: a new paradigm for Q 
access control 

Joerg Abendroth, Christian D. Jensen 

June 2003 Proceedings of the eighth ACM symposium on Access control models and 
technologies 

Full text available: ' ^pdf(304.19 KB) Additional Information: full citation , abstract , references , index terms 

Various security nnodels have been proposed in recent years for different purposes. Each of 
these aims to ease administration by introducing new types of security policies and models. 
This increases the complexity a system administrator is faced with. Ultimately, the resources 
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expended in choosing amongst all of these models leads to less efficient administration. In 
this paper, we propose a new access control paradigm, which is already well established in 
virus and SPAM protection as partial dele ... 

Keywords: ASCap framework, access control, active software capabilities, partial 
outsourcing 



9 Does licensing require new access control techniques? 
Ralf C. Hauser 

December 1993 Proceedings of the 1st ACM conference on Computer and 
communications security 

Full text available: ^pclf(804.20 KB) Additional Information: full citation , abstract , references , index terms 

Licensing is a topic of increasing importance for software publishers and users. More and 
more, the magnitude of financial transfers between these two partners are determined by 
some electronic licensing service being part of the system on which the licensed software is 
running. In order to ease the use and management of such licensing schemes and to enable 
economic software usage in enterprise-wide computer systems through flexible and fair 
billing structures, various organizations are wor ... 

10 Protocol scrubbing: network security through transparent flow modification Q 
David Watson, Matthew Smart, G. Robert Malan, Farnam Jahanian 

April 2004 IEEE/ ACM Transactions on Networking (TON), volume 12 issue 2 

Full text available: ^ pdf(316.54 KB) Additional Information: full citation , abstract , references , index terms 

This paper describes the design and implementation of protocol scrubbers. Protocol 
scrubbers are transparent, interposed mechanisms for explicitly removing network scans 
and attacks at various protocol layers. The transport scrubber supports downstream passive 
network-based intrusion detection systems by converting ambiguous network flows into 
well-behaved flows that are unequivocally interpreted by all downstream endpoints. The 
fingerprint scrubber restricts an attacker's ability to determine t ... 

Keywords: intrusion detection, network security, protocol scrubber, stack fingerprinting 



11 Secure internet access to SAP's R-3: keeping dragons out 
Katherine Jones 

May 1998 International Journal of Network Management, volume 8 issue 3 
Full text available: ^pclf( 167.01 KB) Additional Information: full citation , abstract , index terms 

The security of the networking environment is critical for today's corporations. Issues such 
as reliably identifying remote-access users, checking authorizations, data-transfer security 
and database security are of paramount Importance. This article discusses a resolution of 
these problems for the R8isol;3 environment using CYBERSHIELD^ © 1998 John Wiley 81 
Sons, Ltd. 

12 Tolerating denial-of-service attacks using overlay networks: impact of topoloav 
Ju Wang, Linyuan Lu, Andrew A. Chien 

October 2003 Proceedings of the 2003 ACM workshop on Survivable and self- 
regenerative systems: in association with 10th ACM Conference on 
Computer and Communications Security 

Full text available: gpdffl.OS MB) Additional Information: full citation , abstract , references 

Proxy-network based overlays have been proposed to protect Internet Applications against 
Denial-of-Servlce attacks by hiding an application's location. We study how a proxy 
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network's topology influences the effectiveness of location-hiding. We present two theorems 
which quantitatively characterize when proxy networks are robust against attacks 
(attackers' impact can be quickly and completely removed), and when they are vulnerable 
to attacks (attackers' Impact cannot be completely removed). Us ... 

13 Pervasive computing: Modelina service-based multimedia content adaptation in 
peri/asive computing 

Girma Berhe, Lionel Brunie, Jean-Marc Pierson 

April 2004 Proceedings of the first conference on computing frontiers on Computing 
frontiers 

Full text available: '^ pdff691.71 KB) Additional Information: full citation , abstract , references, index terms 

Pervasive computing applications allow users to access information from anywhere while 
traveling and using variety of devices. Heterogeneity and limitation of resources Involved in 
this application demand adaptation of content according to the current context (device, 
user, network etc.). The dynamic nature of adaptation mechanisms together with emerging 
opportunities of Web Service technology provides new approach of adaptation which is 
service- based. While this approach would provide a valuabi ... 

Keywords: content adaptation services, media transformation, multimedia content 
delivery, pervasive computing 

/i^ Illustrative risks to the public in the use of computer systems and related technology Q . 

Peter G. Neumann 

January 1996 ACM SIGSOFT Software Engineering Notes, volume 21 issue 1 
Full text available: ' ^pdf(2.54 MB) Additional Information: full citation 



15 Service infastructure and network manaaennent: MobiPesk: mobile virtual desktop Q 
computing 

Ricardo A. Baratto, Shaya Potter, Gong Su, Jason Nieh 

September 2004 Proceedings of the 10th annual international conference on Mobile 
computing and networking 

Full text available: '^ pdf(580.39 KB) Additional Information: full citation , abstract , references , index terms 

We present MobiDesk, a mobile virtual desktop computing hosting infrastructure that 
leverages continued improvements in network speed, cost, and ubiquity to address the 
complexity, cost, and mobility limitations of today's personal computing Infrastructure. 
MobiDesk transparently virtualizes a user's computing session by abstracting underlying 
system resources in three key areas: display, operating system, and network. It provides a 
thin virtualization layer that decouples a user's computing ses ... 

Keywords: computer utility, network mobility, on-demand computing, process migration, 
thin-client computing, virtualization 



16 Content-triQQered trust negotiation 

Adam Hess, Jason Holt, Jared Jacobson, Kent E. Seamons 

August 2004 ACM Transactions on Information and System Security (TISSEC), volume 7 

Issue 3 

Full text available: 'g pdf(815.36 KB) Additional Information: full citation , abstract , references , index terms 

The focus of access control in client/server environments is on protecting sensitive server 
resources by determining whether or not a client is authorized to access those resources. 
The set of resources is usually static, and an access control policy associated with each 
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resource specifies who is authorized to access the resource. In this article, we turn the 
traditional client/server access control model on its head and address how to protect the 
sensitive content that clients disclose to and r ... 

Keywords: Trust negotiation, access control, authentication, credentials 



17 The Jini architecture: dyhannic services in a flexible network Q 
Ken Arnold 

June 1999 Proceedings of the 36th ACM/IEEE conference on Design automation 

Full text available: ^ pdf(62.17 KB) Additional Information: full citation , references , citings , index terms 



Keywords: Java, Jini, distributed computing, distribution, networks 



18 Ubiquitous computing/security: Securing nomads: the case for quarantine. Q 
examination, and decontamination 

Kevin Eustice, Leonard Kleinrock, Shane Markstrum, Gerald Popek, V. Ramakrishna, Peter 
Reiher 

August 2003 Proceedings of the 2003 workshop on New security paradigms 

Full text available: pdf(693.40 KB) Additional Information: full citation , abstract , references , index terms 

The rapid growth and increasing pervasiveness of wireless networks raises serious security 
concerns. Client devices will migrate between numerous diverse wireless environments, 
bringing with them software vulnerabilities and possibly malicious code. Techniques are 
needed to protect wireless client devices and the next generation wireless Infrastructure. We 
propose QED, a new security model for wireless networks that enables wireless 
environments to quarantine devices and then analyze and potent! ... 

Keywords: decontamination, examination, mobile computing, nomadic computing, 
pervasive computing, quararitine, security, ubiquitous computing, wireless, worm 



^9 A long-term perspective on electronic commerce 
Eric Hughes 

November 1997 netWorker, volume i issue 3 

Full text available: g pdf(535.69 KB) Additional Information: full citation , references , index terms 



20 Applications, services, and architecture: Smart edge server: beyond a wireless access Q 
point 

G. Manjunath, T. Simunic, V. Krishnan, J. Tourrilhes, D. Das, V, Srinivasmurthy, A. McReynolds 
October 2004 Proceedings of the 2nd ACM international workshop on Wireless mobile 
applications and services on WLAN hotspots 

Full text available: ^ pclf(410.68 KB) Additional Information: full citation , abstract , references , index terms 

Wireless access at cafes, airports, homes and businesses have proliferated all over the globe 
with several different Wireless Internet Service Providers. Similarly, digital media has 
created a paradigm shift in media processing resulting in a complete change in media usage 
models, revamped existing businesses and has introduced new industry players. We believe 
there is a tremendous opportunity for application and system services at the Intersection of 
the above two domains for exploiting the ... 
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>4 USPAT; • • 
and EPO; JPO; 

DERWEI^; 

IBMJTDB 
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S48 



S49 



S50 



S51 



S52 



S53 



S54 



S55 



S56 



S57 



18 



95 



45 



45 



39 



185 



122 



(proxy proxies) same (cach$4 
stor$4 sav$4) nearlO scan$4 
nearlO (file$l data page$l) and 
@ad<"20011206" 

"4633387" 



load adjl balanc$4 nearlO (proxy 
proxies) same round adjl robin 



load adjl balanc$4 nearlO (proxy 
proxies) and round adjl robinnot 
S50 



load adjl balanc$4 nearlO (proxy 
proxies) and round adjl robin not 
S50 



server nearlO farm$4 nearlO 
antivirus$4 



server nearlO farm$4 and 
antivirus$4 



server nearlO farm$4 and virus$4 



server nearlO cluster$4 and 
virus$4 



server nearlO cluster$4 same 
virus$4 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBMJTDB 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OR 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



OFF 



2005/01/12 08:33 



2005/01/12 08:33 



2005/01/12 08:36 



2005/01/12 08:36 



2005/01/12 08:36 



2005/01/12 08:43 



2005/01/12 08:44 



2005/01/12 08:47 



2005/01/12 08:47 



2005/01/12 08:53 
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558 ; 

559 : 


0 -load adjl balanc$6 nearlO (pre 
proxies) and 709/ccls. 

16 load$2 adjl bdlanc$6 nearlO 
(proxy proxies) and 709/217-21 
ccls. 


ixy US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 

TRM THR 

US-PGPUB; 
9. USPAT; 
EPO; JPO; 


OR 0 
OR 0 


FF 2005/01/12 09:00 
FF 2005/01/12 09:15 


560 3! 

561 1? 


SO lodd$2 adjl balanc$6 nearlO 
(proxy proxies cach$4 nearS 
server$l) 

58 load$2 adjl balanc$6 nearlO 
(proxy proxies cach$4 nearS 
server$l) and "7097$.ccls. 

W load$2 adjl balanc$6 nearlO 
(proxy proxies cach$4 nearS 
server$l) and '7097$.ccls. and 
@ad<"20011206" 

32 server nearS (proxy proxies 
C3cn?'f; ssme i03Q$*r neariu 
balanc$4 and virus$4 


DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

. US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 

1 ICDAT' 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 0 

OR 0 


FF 2005/01/12 09:15 
FF 2005/01/12 09:16 


S62 1^ 
S63 


OR 0 
OR 0 


FF 2005/01/12 09:16 
FF 2005/01/12 09:26 
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